From 2b465ee65fb99f8ba5028cdbd552a734dfe7c22a Mon Sep 17 00:00:00 2001 From: Tatsuhiro Tsujikawa Date: Sun, 30 Nov 2014 21:09:23 +0900 Subject: [PATCH] libevent-client: Disable SSLv3 --- examples/libevent-client.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/examples/libevent-client.c b/examples/libevent-client.c index d3e2bd6d..bd20c174 100644 --- a/examples/libevent-client.c +++ b/examples/libevent-client.c @@ -295,7 +295,8 @@ static SSL_CTX *create_ssl_ctx(void) { ERR_error_string(ERR_get_error(), NULL)); } SSL_CTX_set_options(ssl_ctx, - SSL_OP_ALL | SSL_OP_NO_SSLv2 | SSL_OP_NO_COMPRESSION | + SSL_OP_ALL | SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3 | + SSL_OP_NO_COMPRESSION | SSL_OP_NO_SESSION_RESUMPTION_ON_RENEGOTIATION); SSL_CTX_set_next_proto_select_cb(ssl_ctx, select_next_proto_cb, NULL); return ssl_ctx;